Cysiv Command combines essential technologies for a modern SOC into a comprehensive, unified, cloud-native platform and is the foundation for SOC-as-a-Service.
Most telemetry can be pulled from APIs or sent securely to Cysiv Command over the internet. For older sources, such as logs over Syslog UDP, Cysiv Connector provides an encrypted conduit for passing all required telemetry from your environment to the Cysiv platform.
Our SIEM complements—or for some, can replace—an existing SIEM, providing core functionality:
Cysiv’s threat detection engine applies a blend of detection techniques that leverage signatures, threat intelligence, user behavior, statistics, and machine learning to automatically identify potential threats and ensures analysts focus on the most critical detections first.
Orchestrates the SOC process from detection through investigation and response with built in case management, notifications and workflows.
Provides security automation through multiple enrichment sources, including IP geolocation, user and asset information, and correlation to multiple intelligence sources.
Behavior-based analytics are used to detect significant changes to behavior or anomalous activity for an entity.
Standard profiles and behaviors are built for users and hosts across time, and any activity that is anomalous to these standard baselines is triggered as suspicious.
IOCs from dozens of high-quality sources worldwide are classified, corroborated, and scored to provide finished intelligence that is leveraged across the threat detection, hunting, and investigation process.
Community threat exchange: Anonymized IOC data can also be shared amongst opt-in community members.
Provides workflow capabilities, tight integration, transparency, and seamless communication and collaboration during detection handling and incident management.
Based on the NIST Incident Response Life Cycle, it supports integrations with third party products including ServiceNow and RSA Archer.
Pre-configured and customizable dashboards provide key performance indicators relevant to a variety of roles, including analysts/IR, engineers, executives, SOC manager, and compliance/risk managers.
Telemetry retention satisfies compliance requirements.
Faster threat detection, investigation and response
Detects previously unknown threats
Enables powerful threat hunting and forensics
Ensures standardized response processes
Reduces false positives, eliminates alert fatigue, and improves confidence
Ensures adherence to security best practices
No software to license, install, deploy or manage
No hardware to purchase, manage or maintain
Better resiliency with fewer service disruptions
Regular feature updates, without interruption
Instantaneous and massive scalability
Remote login and co-management
Learn why a cloud-native architecture is critical for a modern SOC, and how Cysiv has…
© 2021. All rights reserved. Cysiv and the Cysiv Logo are trademarks of Cysiv, Inc. Other marks and names are trademarks or registered trademarks of their respective owners.
